
TREK MCP Server: Setup for Claude, Cursor and Other Apps
Lets Claude, Cursor and other assistants plan trips in your self-hosted TREK: places, bookings, budgets, packing lists and journals.
TREK is a self-hosted travel planner, and its built-in MCP server lets Claude, Cursor and other assistants plan trips in your own TREK. They can add places, bookings, expenses, packing items and journal entries, and look up places and weather. An administrator has to turn on the MCP addon first, and you then connect with a TREK sign-in from your own server address. Your account's normal permissions still apply, and you choose which permissions to allow on a consent screen.
Good for
- People who self-host TREK and want an assistant to plan trips with them
- Travel groups who split costs and want the assistant to log expenses
- Self-hosters who want to pick exactly which TREK permissions the assistant gets
Works in
12 should work
Tap an app to see how to set it up and any known problems.
Supports hosted MCP servers.
Supports hosted MCP servers.
Supports hosted MCP servers.
Supports hosted MCP servers.
Supports hosted MCP servers.
Supports hosted MCP servers.
Supports hosted MCP servers.
Supports hosted MCP servers.
Supports hosted MCP servers.
Supports hosted MCP servers.
Supports hosted MCP servers.
Supports hosted MCP servers.
Client does not support this transport.
Client does not support this transport.
Install TREK MCP
Claude Code
- 1
Copy this prompt.
Add the TREK MCP server to Claude Code. Run this command: claude mcp add --transport http trek https://<your-trek-instance>/mcp Then check that it loaded and tell me if I need to sign in or restart.
- 2
Paste it into Claude Code. It shows the change and asks before running it.
Requires MCP addon on in TREK.
TREK documents the address and OAuth sign-in, not this command. It is the standard Claude Code form for a remote server. Run /mcp in Claude Code to sign in.
Built from the package data we hold. Not yet tested by us. Source.
Tools
Lists the trips you own or share
Returns every trip you own or are a member of. It is usually the first call, so the assistant can pick the right trip.
Try: “What trips do I have coming up?”
Read ·
list_tripsShows one trip in full
Returns a trip's details, members, days, planned places and notes in a single call.
Try: “Summarize my Portugal trip day by day.”
Read ·
get_trip_summaryFinds a real place by name or address
Searches for a real-world place and returns its location and IDs, so it can be added to a trip.
Try: “Find the Time Out Market in Lisbon.”
Network ·
search_placeGets the weather forecast for a place and date
Returns the forecast for a location on a given date.
Try: “What is the weather in Porto on May 3?”
Network ·
get_weatherLists a trip's expenses
Returns the trip's expenses page by page, with the totals and the names beside them.
Try: “How much have we spent on food so far?”
Read ·
list_budget_itemsShows who owes what on a trip
Returns what each person owes in total and how much they paid, in the trip currency.
Try: “Who owes whom after the Rome trip?”
Read ·
get_budget_per_personLists a trip's packing checklist
Returns the packing items you may see on a trip. Other members' personal items stay hidden.
Try: “What is still unpacked for the hiking trip?”
Read ·
list_packing_itemsShows your travel stats
Returns visited and planned countries with place and trip counts per country.
Try: “How many countries have I visited?”
Read ·
get_atlas_statsSearches the built-in TREK manual
Searches the user manual bundled with your TREK instance.
Try: “How do I share a trip with a friend who has no account?”
Read ·
search_helpCreates a new trip
Creates a trip and generates one day for each day of its date range.
Try: “Create a trip to Japan from April 3 to April 14.”
Write ·
create_tripChanges a trip's details
Updates a trip's title, dates or notes. Shortening a dated trip deletes its last days and what was planned on them.
Try: “Move the Japan trip to start on April 5.”
Delete ·
update_tripAdds a place to a trip
Adds a place or point of interest to a trip, using the IDs that search_place returns.
Try: “Add the Fushimi Inari shrine to the Japan trip.”
Write ·
create_placePuts a place on a day of the itinerary
Assigns a saved place to a specific day of the trip.
Try: “Put the shrine on day 3.”
Write ·
assign_place_to_daySuggests a booking for a trip
Creates a booking as pending, so you confirm it yourself.
Try: “Add a flight booking from Lisbon to Porto on May 2.”
Write ·
create_reservationAdds an expense to a trip
Adds an expense and splits it equally among the members you name, or all members.
Try: “Add a 120 euro dinner and split it between all of us.”
Write ·
create_budget_itemAdds an item to the packing list
Adds an item to a trip's packing checklist, shared or personal.
Try: “Add sunscreen to the packing list.”
Write ·
create_packing_itemAdds a to-do to a trip
Creates a to-do item for a trip.
Try: “Add a to-do to renew my passport.”
Write ·
create_todoAdds a document to a trip
Uploads a document such as a ticket or booking confirmation and can attach it to a booking or place.
Try: “Attach this hotel confirmation to the Kyoto stay.”
Write ·
upload_trip_fileImports places from a shared map list
Imports places from a shared Google Maps or Naver Maps list link into a trip.
Try: “Import the places from this Google Maps list into my Paris trip.”
Write ·
import_places_from_urlWrites an entry in a travel journal
Adds an entry to a journey in the Journey addon, with a location when it is known.
Try: “Write a journal entry about today's visit to the market.”
Write ·
create_journey_entryMarks a country as visited
Marks a country as visited in your Atlas.
Try: “Mark Portugal as visited.”
Write ·
mark_country_visitedCreates or renews a trip invite link
Creates the trip's invite link, or replaces it with a fresh one. Anyone with the link can join the trip.
Try: “Make an invite link for the Japan trip.”
Write ·
create_trip_invite_linkDeletes an expense from a trip
Removes one expense from a trip's budget.
Try: “Delete the duplicate taxi expense.”
Delete ·
delete_budget_itemRemoves an item from the packing list
Removes one item from a trip's packing checklist.
Try: “Remove the umbrella from the packing list.”
Delete ·
delete_packing_itemDeletes a whole journey
Permanently deletes a journey. Only the owner can do it and it cannot be undone.
Try: “Delete my old test journey.”
Delete ·
delete_journeyDeletes a whole trip
Deletes a trip. Only the trip owner can do it.
Try: “Delete the cancelled Berlin trip.”
Delete ·
delete_trip
Read from the source code
Permissions
high risk · 4 things to watch · 4 advisories
High risk
The assistant can create, change and delete trips, bookings, expenses and journals in your TREK account. Tick only the permissions you need on the consent screen, and avoid the deprecated static token.
What it can do
- Read your data
- Create and change things
- Delete things
- Read-only mode
Watch out for
It can delete trips, journeys and expenses
Delete tools exist for trips, journeys, budget items, packing lists and more. Tick only the write and delete permissions you need on the consent screen. github.com
The old static token has full access
The deprecated API token skips the consent screen and gives every tool with no limits. Use OAuth instead. github.com
An invite link can add people to a trip
One tool creates or renews a trip invite link, and others can switch calendar feeds on or off. Check the link before sharing it. github.com
Off by default and tied to your own server
An admin must enable the MCP addon, and the address is your own TREK instance. Set its public https address so sign-in works. github.com
Security advisories
4 known advisories, all fixed in a newer version.
- Cross-tenant IDOR in reservation day-position writes (REST + MCP) via /trips/:tripId/reservations/positionsmedium · Fixed in 4.0.0 · GHSA-gjf5-8q58-7hfm
- MCP get_trip_summary returns trip data + member emails regardless of the token's OAuth scopes (scope-enforcement bypass / PII disclosure)medium · Fixed in 3.3.0 · GHSA-qvw8-w937-vcmq
- MCP tools bypass the admin-configurable RBAC permission systemmedium · Fixed in 3.1.0 · GHSA-6f5j-xgjg-h9q7
- MCP share-link tools let a non-owner member mint a public trip share linkmedium · Fixed in 3.1.0 · GHSA-mggj-xgv8-95fp
35 other advisories are about the wider TREK project, not this MCP server. See them on GitHub
Technical details
| Turning on read-only | No read-only switch is documented. You choose which permission groups to allow on the consent screen, and a client only sees tools for the permissions you ticked. |
|---|---|
| Talks to | Your own TREK server. Place, weather and map lookups made by TREK |
| Sign-in and keys | Sign in with your TREK account (OAuth 2.1). Tokens last one hour and refresh automatically. Machine clients and a deprecated static token with full access also exist. |
| Scopes |
|
Questions
Is the TREK MCP server official?
Yes. It is built into TREK itself and ships with the app, so there is nothing separate to install.
What is the TREK MCP server URL?
It is your own TREK address followed by /mcp, for example https://trek.example.com/mcp. There is no shared hosted address.
How do I turn it on?
An administrator enables the MCP addon in the TREK admin panel. Set the public https address of your TREK so sign-in can find it. Then follow the install box for your app.
Does it need an API key?
No. Interactive apps sign in with your TREK account and you approve permissions on a consent screen. Scripts can use a machine client with its own ID and secret. A static token still works but is deprecated.
Can I make it read-only?
Not with one switch. On the consent screen you choose which permission groups to allow, and the assistant only gets tools for those. Allowing only the read permissions keeps it from changing anything.
Can it delete my trips?
Yes, if you allow the write permissions. It has tools to delete trips, journeys, expenses and packing items. Only the owner can delete a trip.
Is this the full tool list?
No. The tool list on this page is a partial sample. The server has about 410 tools, and many depend on addons the admin has switched on.
Does the TREK AI assistant use the same server?
It uses the same tools and permission checks, but it does not connect through the MCP address. It is a chat inside TREK with its own model settings, and its changes wait for your confirmation.
Information
updated Nov 2, 2026
- Publisher
- Official
- Transport
- Streamable HTTP
- Auth
- OAuth
- License
- AGPL-3.0
- Last commit
- Oct 31, 2026
- Open issues
- 4
Sources
Docs, issue trackers and discussions this page is built from. Issues, quotes and findings above link to their own source.
Show all 4Hide
- github.com · github.com
- github.com · github.com
- github.com · github.com
- github.com · github.com